Resubmissions
09-10-2022 07:11
221009-hz8hdagfdk 10Analysis
-
max time kernel
90s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2022 07:11
Static task
static1
Behavioral task
behavioral1
Sample
19480050000.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19480050000.dll
Resource
win10v2004-20220901-en
General
-
Target
19480050000.dll
-
Size
492KB
-
MD5
b9994adeb2d2280fa382021f90ed543a
-
SHA1
e923f3817428c782ae8d322675a1894fa1cc80a2
-
SHA256
bd701c3324f75d6cb5142be787c644155bd4f574a57c6597094f9d845698c044
-
SHA512
2caff084d42f8abd48deac4481461e9938e18b1b52954ae43310dcca5e8f54ef54a39edfa576a2aa6c65f174097fb450691db2386c9d45c05f0608837984e84d
-
SSDEEP
6144:bu9eXk43y9Oj7+icKdK8V553LGPLyu7mtR2rO6Lju92V1absqgiMXTFvXItuVvRx:buo4I+KVH530athewbuik4MVb
Malware Config
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
FlawedGraceRAT
FlawedGrace is a full-featured RAT written in C++.
-
Processes:
resource yara_rule behavioral2/memory/4876-133-0x00000000022E0000-0x0000000002358000-memory.dmp flawgrace_loader_x64